CVE-2026-4129 — Improper Access Controls in NI SystemLink

CVE-2026-4129

Improper Access Controls in NI SystemLink PUBLISHED

Description (CNA)

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

Affected (CNA)

Vendor / product	Versions
NI / SystemLink	affected 0 before 26.5.0
NI / SystemLink Server	affected 0 before 26.5.0

CWE

CWE-862

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/improper-access-controls-in-ni-systemlink.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.